NSA - NoScript Anywhere

NoScript Mobile Multiprocessing / Android Porting Project

What's

NoScript Anywhere (NSA) is the nickname for the next major iteration of
the NoScript security add-on (NoScript 3.x),
whose guts have been turned upside down in order to match Mozilla's
Electrolysis multiprocessing architecture
and implement a porting for Firefox Mobile,
available on Android smartphones and tablets.

This open source (GPL) effort has started in the very beginning of 2011, and has been partially funded by
the NLnet Foundation.

NoScript 3 alpha, available on
Firefox 4 Mobile for the Android and Maemo operating systems,
offers all the the major security features of "classic" NoScript:

* Fully implemented on the first NSA (Firefox 4 Mobile); recent (2012) subfeatures
and the warnning dialog still need to be ported in NSA++ (Android-native Firefox).
** Fully implemented on the first NSA (Firefox 4 Mobile);
partially working on NSA++ (Android-native Firefox)
but needs bug fixing, testing and the Sync functionality to be restored for being usable beyond the basic
default LAN protection (which already works).

NoScript 3.x is implemented as a restartless add-on
for Firefox Mobile,
initially meant to explore the issues and the challenges posed
by the Electrolysis
multiprocessing architecture to a NoScript porting, then almost rewritten a second time
to follow Mozilla's architecture U turn with the Android-native UI.

Full Protection (like "Classic Whitelist", but all the embedded content is blocked until you click, even on trusted sites)

NSA++, the new Android Native NoScript porting
In late 2011, Mozilla abandoned the Electrolysis/XUL architecture of its mobile Firefox and rebuilt it
as a Gecko renderer embedded inside a native Android application, achieving a huge performance and responsiveness boost.

Unfortunately, this change made the original NSA incompatible almost overnight,
and required yet another massive NoScript rewrite to bring it back on mobile devices.

ClearClick and ABE are partially working but have no UI yet (they do silently block "tapjacking" attempts and cross-zone CSRF respectively, though).

Remote synchronization (Sync) is still completely missing, but is a priority as well.

The long-term goal is to reach feature parity with the stable desktop version and replace it with NSA's more modern, clean and future-proof (e.g. multiprocessing-aware) code.
Unfortunately the need to keep "traditional" NoScript 2.x up-to-date for its millions of users makes this process painful and slow,
especially because the project's current financial resources can fairly support the active development of one single codebase, but are insufficient for two divergent ones to be kept in sync.
Therefore Donations,
sponsorships, partnerships, grants and other funding proposals to keep NoScript really Anywhere are extremely welcome!